Welcome to MSDN Blogs Sign in | Join | Help

adarsh's blog

Adarsh Khare works at Microsoft. Everything here, though, is his personal opinion and is not read or approved by Microsoft before it is posted. No warranties or other guarantees will be offered as to the quality of the opinions or anything else offered here.
Client side certificate with strong key protection and WebServices

When you are writing application to run as service or middle tier, which is using client certificates. You should not enable strong key protection during certificate installation.

Strong key protection is the way you are informing the system that whenever someone want to use this protected resource (client certifcate) then prompt me for the permission. In middle tier environment you really do not want this prompt, you really want to run your application unattended. In fact with .Net frameworks 1.1, SP1 you won't be able to use the certificate with strong key protection.

Check the posting from Kevin W. Hammond about his experience on this issue

http://blogs.msdn.com/kevinha/archive/2005/02/15/373254.aspx

 

This posting is provided "AS IS" with no warranties, and confers no rights

 

Posted: Thursday, February 17, 2005 10:46 AM by adarshk

Comments

Overdrive said:

But what can I do to connect to a SSL server with client certificates if i run the code in a w2000 with framework 1.1?
Ok, I create a pfx file with the private key and not enable strong key protection?
But how I read the file if the X509Certificate.CreateFromSignedFile function didn´t have a password parameter?
It works with pfx files?
# March 7, 2005 12:17 PM
Leave a Comment

(required) 

(required) 

(optional)

(required) 

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Page view tracker